CRM-13873 permission tokens for rules in D7